Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json)
Hash identifier: vUDwjj58O14o+TxG0pPYTscX0iga4KfS8AVtoJ+8ovc=
Subject key identifier: 0D:B4:A6:9F:F4:27:D1:D5:11:EB:9F:83:BE:F8:69:4D:CE:00:D6:27
Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A
Certificate serial: 1053250FC6E72B73A679749B59960D1E87399F4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
Manifest number: EE
Signing time: Sat 29 Mar 2025 02:21:37 +0000
Manifest this update: Sat 29 Mar 2025 02:16:37 +0000
Manifest next update: Tue 01 Apr 2025 08:31:37 +0000
Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: 3OM2jYJdYIm7Cc/CfMZ6OwMREZ2LlvqxeAakq+Jibo0=)
2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=)
3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:53:25:0f:c6:e7:2b:73:a6:79:74:9b:59:96:0d:1e:87:39:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A
Validity
Not Before: Mar 29 02:16:37 2025 GMT
Not After : Apr 1 08:31:37 2025 GMT
Subject: CN=0DB4A69FF427D1D511EB9F83BEF8694DCE00D627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:7b:82:2b:78:6f:7d:6e:1f:56:0c:6e:ee:
cb:62:d9:d5:11:47:05:2c:f7:f6:32:4e:ef:54:3e:
21:23:c8:e9:45:bd:fe:ae:0c:c6:cc:c5:fc:ee:ae:
79:95:95:6d:81:e1:fa:24:3b:65:84:23:7a:c8:df:
dd:fc:37:3f:b6:56:0a:e9:e1:6d:f6:e6:cd:d8:32:
0e:fd:dd:b8:4c:3c:cb:73:32:2d:76:fa:d2:be:8c:
54:a3:4f:58:e8:8f:22:65:57:cf:30:2e:6e:36:54:
9d:26:c9:67:2c:ec:21:4a:d0:c5:36:4f:e5:5f:50:
70:aa:96:cb:c8:31:4f:f2:9b:e2:83:6a:6b:1c:6b:
d3:55:f3:57:a8:13:e5:6d:0e:56:e5:7e:f0:10:1d:
7b:01:f5:3a:b7:42:3f:f3:42:35:b5:da:d0:6b:9f:
c8:3d:7e:4a:f3:ac:3e:e7:99:3a:b6:33:ca:5d:1f:
f6:c5:ce:20:88:9b:a0:90:ae:ef:43:d2:c0:b8:f6:
a5:c6:23:a9:a7:6f:09:08:eb:74:78:a2:c9:77:17:
24:c4:de:6a:b6:06:2a:fb:e5:df:02:73:d8:5a:ec:
e9:e1:1d:10:1a:be:e9:76:a2:8c:c4:14:2a:89:ad:
9c:c2:4c:f4:93:47:2e:a7:a9:26:30:24:da:ab:7a:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:A6:9F:F4:27:D1:D5:11:EB:9F:83:BE:F8:69:4D:CE:00:D6:27
X509v3 Authority Key Identifier:
keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:7c:91:a4:f2:d1:4b:ca:b9:5f:f4:64:f8:f4:95:0d:d7:
40:cc:ac:fd:68:67:d1:13:93:e5:6a:ce:8d:a3:0d:0a:8b:44:
ff:49:ed:d4:61:d7:91:9d:ff:ba:0c:75:84:f3:85:93:5f:4e:
09:93:6d:00:83:c0:4a:a7:76:55:7c:83:3e:8d:ba:eb:ae:35:
0a:f6:98:f1:18:90:0f:a8:75:6e:99:b4:5f:f5:37:d5:0a:eb:
eb:46:36:04:9e:47:8d:23:59:0f:9d:ae:71:f3:03:02:e7:a1:
9f:01:5f:14:f3:70:b4:17:57:52:d7:d3:58:47:fe:db:6d:58:
7d:3c:b0:83:ec:f1:31:15:a7:b5:90:f7:d5:df:4f:97:01:e4:
b4:30:0b:b9:5e:f2:b1:0c:f8:22:7f:80:e5:06:0f:f9:c9:ea:
04:e2:0e:7a:85:52:c3:ec:d9:10:64:55:02:f9:0e:8a:08:77:
52:25:f7:23:6a:35:00:6f:56:b1:0b:d4:3b:95:a2:a8:ee:94:
9f:af:47:45:41:2b:87:91:35:11:4f:39:4e:bf:3b:2b:b0:a9:
76:fb:cf:8a:0c:8f:45:13:5a:1e:74:bf:71:3c:dd:c0:b2:6d:
30:f3:84:73:66:00:05:59:bc:f5:ca:0e:ce:71:80:7c:c4:49:
4f:90:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:43 2025 by rpki-client